CVE-2026-63090

ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the modsftp module that allows authenticated low-privilege attackers to achieve arbitrary code execution by sending crafted SFTP packet fragments exceeding the 16 KB reassembly buffer in the fxp.c component...

CVE-2026-45270

CI4MS (ci4-cms-erp/ci4ms) has a stored-XSS vulnerability in its Pages module due to html_purify mutating the input by reference, while the DB stores raw content and the public renderer outputs it without escaping. The issue affects language-keyed page content; administrators and visitors can exec...

CVE-2026-45270 CI4MS: Stored XSS in Pages Module Content via Broken html_purify Validation Rule

CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the Pages backend module registers the htmlpurify validation rule on language-keyed page content but persists the raw, un-purified POST value into the database. The public renderer for pages Home::index ...

CVE-2026-45270 CI4MS: Stored XSS in Pages Module Content via Broken html_purify Validation Rule

CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the Pages backend module registers the htmlpurify validation rule on language-keyed page content but persists the raw, un-purified POST value into the database. The public renderer for pages Home::index ...

NginxRift-Poc

NGINX Rift — CVE-2026-42945 RCE proof-of-concept for CVE-20...

CVE-2026-45139

Summary of CVE-2026-45139 (CI4MS Fileeditor) : The Fileeditor module fails to validate the source path extension for two destructive endpoints, deleteFileOrFolder and renameFile, allowing a backend user with file-editor permissions to delete or rename arbitrary files inside the project root (e.g....

CVE-2026-12484

A flaw was found in Keras, specifically within the keras.layers.TorchModuleWrapper.fromconfig method. This vulnerability allows an attacker to perform unsafe deserialization of PyTorch pickle data. By processing untrusted Keras layer configurations, a local attacker could exploit this flaw, leadi...

USN-8563-1 nginx vulnerabilities

It was discovered that nginx incorrectly handled certain map directives using regex matching and capture variables. A remote attacker could use this issue to cause nginx to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2026-42533 It was discovered that nginx had...

USN-8563-1: nginx vulnerabilities

It was discovered that nginx incorrectly handled certain map directives using regex matching and capture variables. A remote attacker could use this issue to cause nginx to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2026-42533 It was discovered that nginx had...

batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd

...

batman-adv: tp_meter: restrict number of unacked list entries

...

httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime

A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...

Important: Red Hat Security Advisory: evince security update

An update for evince is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

The vulnerability of the microprogrammed input/output module software of the FLEX 5000, related to the repeated release of memory, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed input/output module software of the FLEX 5000 is related to the repeated release of memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending specially crafted CIP packets...

Linux Distros Unpatched Vulnerability : CVE-2026-63993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached iphdr value after skbtunnelcheckpmtu skbtunnelcheckpmtu can chang...

TencentOS Server 2: perl-IO-Compress (TSSA-2026:0652)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0652 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-64076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: bridge: ebtables: close module init race sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a simil...

Linux Distros Unpatched Vulnerability : CVE-2026-64018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rxreqidx to prevent out-of-bounds array access In manahwcrxeventhandler,...

PT-2026-64216

Name of the Vulnerable Software and Affected Versions rsyslog affected versions not specified Description Two issues were identified in rsyslog. First, the imptcp module incorrectly handles regex-based TCP framing, which could allow a remote attacker to cause the service to crash. Second, a stack...

PT-2026-61612

Name of the Vulnerable Software and Affected Versions ProFTPD versions prior to 1.3.9c ProFTPD versions prior to 1.3.10rc3 Description A signed integer overflow exists in the mod sftp module's SCP size-record parser. Authenticated low-privilege attackers can bypass ASLR Address Space Layout...